Siemens Solid Edge
Siemens has released a new version for Solid Edge that fixes multiple file parsing vulnerabilities which could be triggered when the application reads files in IFC, JT or OBJ formats. If a user is tricked to opening a malicious file using the affected application this could lead the application to crash, or potentially arbitrary code execution on the target host system. Siemens recommends to update to the latest version and to limit opening of files from unknown sources in the affected products.
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-41540US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An at… | ||||
| CVE-2021-41539US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An at… | ||||
| CVE-2021-41538US | low3.3 | — | ||
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected… | ||||
| CVE-2021-41537US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An at… | ||||
| CVE-2021-41536US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An at… | ||||
| CVE-2021-41535US | high7.8 | — | ||
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected… | ||||
| CVE-2021-41534US | low3.3 | — | ||
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of boun… | ||||
| CVE-2021-41533US | low3.3 | — | ||
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of boun… | ||||
| CVE-2021-37203US | high7.1 | — | ||
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read… | ||||
| CVE-2021-37202US | high7.8 | — | ||
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - CSAF Versionself
- SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - PDF Versionself
- SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - TXT Versionself
- ICS Advisory ICSA-21-287-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-287-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (20)
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- MitigationSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
- BehobenSolid Edge SE2021
Update to SE2021MP8 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan